Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File: qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier: Qc29U+34ixHXFADnrLx3Jlgzvnue8jiLqhPI3z/dPDw=
Subject key identifier: 80:F8:1F:D5:3E:BB:5C:B3:A1:23:1A:95:29:3C:E6:CB:2D:1B:00:CC
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer: /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial: 0198861EE430FA97DDD665614F6DC709D6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 20:00:27 +0000
Manifest this update: Thu 07 Aug 2025 20:00:27 +0000
Manifest next update: Fri 08 Aug 2025 20:00:27 +0000
Files and hashes: 1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: GJ9yyZFJVwcygmAJwwFGxsIDkxAwC/ebAkho6X7/1rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1e:e4:30:fa:97:dd:d6:65:61:4f:6d:c7:09:d6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Validity
Not Before: Aug 7 20:00:27 2025 GMT
Not After : Aug 8 20:00:27 2025 GMT
Subject: CN=80f81fd53ebb5cb3a1231a95293ce6cb2d1b00cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:d1:60:5a:bb:67:a4:4c:e9:cf:e9:a4:cb:
9e:d1:9c:63:82:de:7d:c7:6a:ed:de:f5:ca:5b:a4:
57:22:6a:8b:df:bc:75:1e:f0:ca:fa:2b:6d:79:59:
3d:a3:3f:a4:27:3b:e9:9b:f8:c8:ae:28:c6:65:e1:
dc:df:d1:cf:6f:87:19:f3:c5:d6:05:eb:92:4f:02:
f2:cf:8c:9a:e0:a0:59:f2:2e:e6:f6:56:47:3a:75:
b8:a4:96:46:a5:09:12:97:03:c6:64:70:fd:aa:95:
08:ec:1e:73:07:30:7b:21:16:64:bd:bc:2c:94:5b:
47:20:0f:82:90:24:f6:6f:65:e1:27:77:34:e5:28:
8b:a2:de:4e:8f:a5:f7:10:33:14:aa:52:50:09:cf:
e5:44:12:d0:00:f3:6c:eb:33:a4:91:09:a2:56:6f:
00:7e:04:cd:e3:0f:53:9d:2e:de:f2:9c:d4:fb:b1:
af:0d:e6:89:ec:4c:a7:ce:2c:8c:2a:a0:72:94:9f:
99:29:f6:25:bc:a5:4d:2b:93:9f:70:0a:9d:48:ad:
61:09:7b:55:9c:40:de:a3:7d:76:03:a2:6f:f0:33:
57:37:ba:b6:ca:01:1e:e3:1d:e7:bc:ed:3b:74:a6:
73:34:88:90:cb:01:32:c9:f1:59:7d:60:26:e3:b9:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:1F:D5:3E:BB:5C:B3:A1:23:1A:95:29:3C:E6:CB:2D:1B:00:CC
X509v3 Authority Key Identifier:
keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b9:7c:6d:50:c2:1b:7f:cf:b5:39:ca:c6:31:b9:21:a5:6b:
24:b1:5e:06:af:ef:41:1d:85:ad:bd:98:7a:95:de:79:24:a6:
fa:96:e7:8c:b4:13:ca:50:f8:98:36:51:99:c6:d7:3d:51:fa:
d7:90:53:74:c3:37:cf:55:ce:d9:40:0c:28:03:5c:bc:77:22:
72:5d:86:0b:bb:9e:f7:ed:7a:af:04:a8:fc:d3:4f:43:25:20:
05:b3:3a:27:00:65:b8:c1:ec:e7:61:5f:04:69:e9:6a:cd:0d:
0e:d4:6d:32:3f:e0:ba:37:6b:a6:fd:12:dd:b3:c9:dc:c6:dc:
ab:c5:fc:0f:2c:bd:af:81:95:d5:0e:11:c1:4a:91:66:d6:80:
18:69:d4:e6:6e:86:81:c5:38:23:07:2b:70:57:4a:26:a2:2a:
0e:79:55:8c:8e:06:48:c3:68:36:af:3e:d2:af:0a:1c:ef:74:
df:72:01:37:3f:f8:e9:47:88:e2:6a:43:5d:4a:36:6c:36:c6:
36:f8:f3:d5:b8:be:5e:5b:fe:1a:4c:3b:df:55:f1:35:fd:c1:
4f:51:c0:e2:50:34:6f:32:da:93:aa:f2:d6:82:ce:ab:57:0f:
a4:7a:85:95:53:55:cd:e3:24:2e:05:ed:05:ee:f5:ad:19:fc:
28:48:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:46:17 2025 by rpki-client